Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32332e302f32342d3234203d3e203137363231.roa
File:                     3137352e3130322e32332e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          UpOhRm4xH1CwzT4M9U7sD5XyFS9DETkLyiGge3xHA0I=
Subject key identifier:   59:5B:39:24:C8:B2:A6:47:D1:A8:93:E4:7B:3D:53:4C:B9:E2:59:44
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       427630F4C55D421D78D4DCB9A8BDFFA0DAFDF0C0
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32332e302f32342d3234203d3e203137363231.roa
Signing time:             Thu 07 May 2026 01:43:19 +0000
ROA not before:           Thu 07 May 2026 01:38:19 +0000
ROA not after:            Thu 06 May 2027 01:43:19 +0000
asID:                     17621
IP address blocks:        175.102.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:76:30:f4:c5:5d:42:1d:78:d4:dc:b9:a8:bd:ff:a0:da:fd:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:38:19 2026 GMT
            Not After : May  6 01:43:19 2027 GMT
        Subject: CN=595B3924C8B2A647D1A893E47B3D534CB9E25944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:56:ce:2b:bf:22:4a:26:d6:65:69:e1:98:6b:
                    4c:04:9e:cb:92:30:b0:9f:41:86:1d:90:8c:d5:9d:
                    84:3b:0f:de:c1:dc:5a:2a:8a:71:0d:fd:7d:09:c0:
                    2f:12:79:e4:f3:d6:ee:70:56:26:a5:79:c3:35:1a:
                    bb:56:9b:60:4d:6d:48:80:6c:e1:39:46:9b:06:75:
                    c4:63:e1:2d:f9:8f:06:10:9f:20:39:b6:c7:57:a9:
                    26:74:97:83:33:7f:f4:f2:12:cc:0f:04:16:2c:d5:
                    11:f1:30:bb:bd:6d:b8:e0:af:b0:19:48:fe:14:a1:
                    3d:6d:b0:ff:e0:cc:b8:60:58:a0:ce:02:24:33:94:
                    ad:1a:e3:bd:19:38:e7:2d:e4:d2:46:be:a6:3e:4f:
                    95:29:83:03:2e:67:74:93:21:5d:80:f5:6c:57:cf:
                    4a:64:00:41:a5:ac:27:d4:26:f0:d3:e0:51:f8:82:
                    27:e1:dd:61:4a:0e:72:8b:d1:28:2f:cf:c1:36:0f:
                    5a:bb:53:2f:a5:ca:0a:f2:dd:42:38:74:f3:0b:06:
                    c7:09:95:8c:ab:1d:a1:b6:f2:df:d9:c6:17:46:eb:
                    32:13:27:0a:0f:f6:61:a8:c1:42:e5:c9:f5:99:8c:
                    c7:f7:0f:42:5f:00:ee:de:a4:12:e5:62:10:56:54:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5B:39:24:C8:B2:A6:47:D1:A8:93:E4:7B:3D:53:4C:B9:E2:59:44
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32332e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f2:ba:73:b9:84:0c:8d:2d:46:87:30:ef:ad:79:18:ba:cb:
         6a:a2:d3:ec:14:4b:d4:6c:85:65:69:a2:25:52:5b:a4:f9:d8:
         97:33:2c:6a:9f:d0:45:32:25:38:fa:27:87:f0:86:c9:fc:69:
         44:c6:97:2c:fb:3f:70:51:d4:b1:87:90:5e:4d:28:bd:3b:50:
         35:b1:d5:4b:03:a4:f8:9e:27:7f:e5:f1:2b:9d:2c:0b:fd:ef:
         8d:5e:4a:d0:a7:cc:1a:db:71:aa:90:fa:c6:9a:53:28:4f:4b:
         59:98:10:65:10:9a:9e:82:54:a2:b5:68:49:ce:25:e0:e6:ef:
         94:8d:f4:43:e7:2b:59:47:fa:88:9d:ea:3d:95:ec:6e:7c:96:
         6c:fe:74:68:4d:ff:81:cf:e6:3f:1d:82:6b:71:6a:e4:c5:28:
         1e:c3:60:bd:8b:f2:7f:43:be:66:8c:18:88:3d:98:41:42:23:
         5c:9f:4f:e0:74:43:f4:21:a1:e5:9c:03:a4:5a:0a:cd:ee:cb:
         c2:51:b7:33:ae:df:40:3b:89:b6:d3:fc:b5:97:c6:db:c2:0e:
         ec:90:9a:25:76:99:c5:a1:08:a7:ee:dc:18:2b:f5:4e:67:66:
         51:7f:7d:b3:d6:21:0a:12:16:61:63:f6:6d:b8:55:a6:81:57:
         93:41:e2:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:39:18 2026 by rpki-client